Rapid7 InsightIDR vs. SolarWinds Security Event Manager (SEM)

Rapid7 InsightIDR

SolarWinds Security Event Manager (SEM)

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
InsightIDR	Score 9.5 out of 10	N/A	In addition to their incident response service, Rapid7 offers InsightIDR, a combined XDR and SIEM that provides user behavior and threat analytics.	$5.89 per month per asset
SolarWinds Security Event Manager (SEM)	Score 8.0 out of 10	N/A	SolarWinds LEM is security information and event management (SIEM) software.	N/A

Pricing

Rapid7 InsightIDR

SolarWinds Security Event Manager (SEM)

Editions & Modules

InsightIDR Advanced: $5.89
per month per asset

No answers on this topic

Offerings

Pricing Offerings
InsightIDR	SolarWinds Security Event Manager (SEM)
Free Trial
Yes	Yes
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Additional Details

*500 asset minimum. Billed annually. All amounts are shown in U.S. dollars. International prices vary.

—

More Pricing Information

Community Pulse
	Rapid7 InsightIDR	SolarWinds Security Event Manager (SEM)
Considered Both Products	InsightIDR Azhar Chaudri Cyber Security Training Specialist Chose InsightIDR N/A Incentivized Helpful? Varun Khare Senior Analyst Chose InsightIDR The biggest advantage it has the lightweight agent and smooth and less traffic chaos in network during log collection. Cloud Security always require extra efforts but InsightIDR reduce that burden as it has highly anticipated agents to which knows what they need to do when they … Incentivized Helpful? AE Allan Crittenden Edwards Security Analyst Chose InsightIDR Other products are OK, but they lack the robust permissions and their interfaces are much much less intuitive. Rapid7's prioritization system for vulnerabilities makes more sense given their context as the developers of Metasploit. We thought we might be able to switch and save … Incentivized Helpful? Bhuwan Chandra Business Development Manager Chose InsightIDR We tried other solutions, but our Network, which is mostly in different locations with different OEMS , was well suited by Rapid7. Rapid7 works with different workflows and SIEM solutions, which was a requirement of the SOC solution. Visibility allows the security operation to … Incentivized Helpful? Chris Goodhue Network Security Specialist Chose InsightIDR Have not used other tools Incentivized Helpful? Verified User Anonymous Chose InsightIDR Many of the top-tier providers of this technology do a comparable job. However, we selected Rapid7 because of their reputation in the area of user behavior analytics, cost, # of SOC locations (due to our selection of their MDR service), support, company growth in other areas … Incentivized Helpful? Verified User Anonymous Chose InsightIDR Both products would do what we needed them to, but Rapid7 InsightIDR made more sense from a cost perspective. We did a proof of concept of both products, and they were pretty evenly matched in their own ways. Forescout had a better interface, but in the end the interface of … Incentivized Helpful? SS SP Singh Sr. DE/ML Chose InsightIDR None. Incentivized Helpful? Verified User Anonymous Chose InsightIDR Between Rapid7 InsightIDR and Crowdstrike, we liked Rapid7 InsightIDR due to the functionality of the system and the features Rapid7 InsightIDR has. Rapid7 InsightIDR was very easy to deploy in our environment to our endpoint devices. We like the scanning capabilities and the … Incentivized Helpful?	SolarWinds Security Event Manager (SEM) Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) It came down to price on this one. SolarWinds gave us a great break on it. For the features that we were looking for, SolarWinds is a great value for our dollar. As far as features go, we were looking for some Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) easier to use than Splunk, light linux core Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Not applicable Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) This was the first product we used in this category and we are very happy with it. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Solarwinds Security Event Manager (SEM) is the best solution for price/performance. The solution has an easily understandable architecture and also the solution can be installed easily. The solution is a very stable and fast solution for our company size. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Ease of deployment Good UI Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Fortianalzyer can only do logs from FortiGate so usefulness is limited. Elasticsearch was a lot slower than Solarwinds and the filters were a lot harder to set up and use. The connectors for SEM were far more stable. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Splunk was a pretty good product but the licensing structure needed a lot of work. They changed the structure three times that I am aware and I still had problems understanding LogRhythm had a lot of issues correlating users to IP addresses, the mappings were frequently wrong … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We found that SolarWinds performed poorly when the Architecture included many large data centers spread across the globe. When evaluating the SolarWinds Security Event Manager (SEM) solution we quickly realized that we needed a distributed architecture with log aggregation to … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We chose this product because of its integration to SolarWinds Orion. We were Threat Monitor users previously. This product has been a great substitute. Dollars to dollars this product performs fairly well. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) SEM is much better value proposition due to being priced by node and not by size of the event database. It's also much easier to configure that splunk and needs much less infrastructure to run. Out of the box SEM beats splunk on functionality. We looked at many products and … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I find Tripwire Log Center to be adequate and stable but it lacks the graphics and the unified UI that you can have with SolarWinds products. It is also not as simple to set up and operate. One more advantage that SolarWinds products have is the THWACK forum, a big user base … Incentivized Helpful? KS Kim Schroeder CTO (Chief Technical Officer) Chose SolarWinds Security Event Manager (SEM) SolarWinds Security Event Manager (SEM) is more of a complete, turn key approach to event management. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) It is a bit hard to compare, since Cortex XDR is kind of a different starship, with endpoint protection and such, and not really great for auditing Windows Event Logs. ELK stack on the other hand is free in some of it's editions but seems much similar then Cortex. SolarWinds SEM … Incentivized Helpful? Tim Short Infrastructure Administrator Chose SolarWinds Security Event Manager (SEM) We picked SolarWinds because of the better price point, integration with other SolarWinds products, and the ease of training. Because we were already familiar with the SolarWinds way of doing alerts and reports, it made this product a nice fit for our company and it has great … Incentivized Helpful? Brandon Demko Systems Administrator Chose SolarWinds Security Event Manager (SEM) We had an older version of SolarWinds SEM, however, it was not being utilized. Incentivized Helpful? AR Adam Radics Production Data Systems Superintendent Chose SolarWinds Security Event Manager (SEM) This was recommended to us by a vendor. As we were using other SolarWinds products, we did not analyze many options. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) The first reason is the ease of installation. Unlike competitor, SEM was running and partially deployed within a day. With the defaults already in the SEM, it's super easy to get result quickly, without a consultant. Also, it's not too resource-intensive, and does not … Incentivized Helpful? AG Alex Giralias System Support Engineer Chose SolarWinds Security Event Manager (SEM) SolarWinds SEM was selected because it integrates with VMAN on the Orion platform and allows all monitoring information and alerts to be aggregated in one place. Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) Several clients have moved away from LogRhythm because of cost. SEM offers the best ROI for the function. Its interface is much cleaner then LogRhythm. However, there is a steeper learning curve with SEM. The ease of search and data integrity offered by SEM is definitely a … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I know the Qradar is not the right SIEM tool to compete with Solarwinds SEM but when we looked from a cost, audit & compliance perspective (which are major for many customers), we knew the log management and compliance with regulation would be achieved with SEM. But no machine … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) SolarWinds provides support so when you have problems you don't need to turn to information bases as you can just get a hold of SolarWinds support. I would say another reason for getting SEM is that it is generally easier to configure and easier to learn than the other … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) I have additionally used Netwrix Auditor, which has some similarity with SolarWinds SEM. I use both hand in hand, but typically use the SEM first since it is easier to manage. With Netwrix custom searches are more complex than customer searches in the SEM. The SEM makes it easy … Incentivized Helpful? Verified User Anonymous Chose SolarWinds Security Event Manager (SEM) We implemented SolarWinds Security Event Manager to replace our Cisco MARS appliance. We found the Cisco MARS appliance cumbersome and difficult to connect to and use, as well as very costly from a support and maintenance perspective. SolarWinds Security Event Manager has more … Incentivized Helpful?

Features

Rapid7 InsightIDR

SolarWinds Security Event Manager (SEM)

Security Information and Event Management (SIEM)

Comparison of Security Information and Event Management (SIEM) features of Product A and Product B
	Rapid7 InsightIDR - Ratings	SolarWinds Security Event Manager (SEM) 8.9 Ratings 14% above category average
Centralized event and log data collection	00 Ratings	9.00 Ratings
Correlation	00 Ratings	8.00 Ratings
Event and log normalization/management	00 Ratings	8.00 Ratings
Deployment flexibility	00 Ratings	10.00 Ratings
Integration with Identity and Access Management Tools	00 Ratings	8.00 Ratings
Custom dashboards and workspaces	00 Ratings	9.00 Ratings
Host and network-based intrusion detection	00 Ratings	10.00 Ratings

Best Alternatives
	Rapid7 InsightIDR	SolarWinds Security Event Manager (SEM)
Small Businesses	Bitdefender GravityZone Score 9.1 out of 10	LevelBlue USM Anywhere Score 3.8 out of 10
Medium-sized Companies	CrowdStrike Falcon Score 9.0 out of 10	Sumo Logic Score 9.4 out of 10
Enterprises	CrowdStrike Falcon Score 9.0 out of 10	Sumo Logic Score 9.4 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Rapid7 InsightIDR	SolarWinds Security Event Manager (SEM)
Likelihood to Recommend	9.9 (0 ratings)	8.0 (0 ratings)
Likelihood to Renew	- (0 ratings)	7.3 (0 ratings)
Usability	- (0 ratings)	8.0 (0 ratings)
Support Rating	- (0 ratings)	7.5 (0 ratings)

User Testimonials
	Rapid7 InsightIDR	SolarWinds Security Event Manager (SEM)
Likelihood to Recommend	It has been brilliant for us in terms of understanding the behaviour affecting our endpoints and assets. We have full visibility of our alerts, which menas we can act on them immediately. We use a single pain of glass with dashboards that can be easily drilled down into to get further information. It has laso helped us eo create bespoke reports for senios Managmeent, while at the same time supports other teams like Network Mnagement and Operations. Incentivized Azhar Chaudri Cyber Security Training Specialist Read full review	Solarwinds SEM is great for generating reports for investigation purposes. Once you set up the connectors you can walk away and the product runs without needing maintenance. It was however pretty difficult to create the reports and alerts when now starting out and it can be very intimidating for new users. Incentivized Verified User Anonymous Read full review
Pros	Rapid7 InsightIDR does a very good job at keeping virus definitions up to date so that our threat intelligence is very up to date when knowing what to protect against. It helps us by scanning all of our infrastructure components and highlights where improvements need to be made in security so we can be proactive with our security initiatives. It has automated response mechanisms to triage and resolve any potentials risks allowing us to save time in the long run. Incentivized Verified User Anonymous Read full review	SolarWinds easily provides the much needed visibily into changes in an Active Directory (AD) environment. Email alerting can be configured to alert a team if an account is locked out, disabled by another users, or if users and/or computers accounts are created. SolarWinds allowed a searchable audit feature. Microsoft Windows can be configured to log many different parts of a system, but search those logs can be difficult. SEM allows you to search for specific users or events. Incentivized Adam Morrison Director of IT Engineering Read full review
Cons	Sometimes Rapid7 InsightIDR will be too locked down and without knowing will block applications and processes needed for day to day operation. System scans with Rapid7 InsightIDR can be very bandwidth-heavy on the network and system resources. From a recent incident, we have seen more and more false positives from Rapid7 InsightIDR on areas that we know are secure. Incentivized Verified User Anonymous Read full review	Compared to other SIEMs, there are features that are missing. Machine learning, automatic event correlation, ability to correlate multiple sources together. The UI is clunky, and the New event log analyzer page felt really disjointed from the rest of the product. In my experience, the dashboards were almost unusable. They persisted across login per device, and even then they sometimes would reset and go back to the ''Getting Started'' look. Incentivized Verified User Anonymous Read full review
Likelihood to Renew	No answers on this topic	It is pretty likely that we will renew SEM when the time comes up. It is easy to use and maintain so there isn't much of a need to replace this product. It is also a pretty fair price for the capabilities provided by the SEM Incentivized Verified User Anonymous Read full review
Usability	No answers on this topic	It is very good - but you get what you pay for. The intent is not for a Fortune 500 that needs more "heavy lifting" with SolarWinds Security Event Manager & for whom the price tag is not (much of) a consideration. Incentivized Verified User Anonymous Read full review
Support Rating	No answers on this topic	The quality of support can vary depending on whom you end up speaking with. I was fortunate enough to work with a support representative who was very familiar with the product. He had even authored some of the support documentation on the website. On the flip side, I had two other experiences where I was simply directed to online training material. Incentivized Brandon Demko Systems Administrator Read full review
Alternatives Considered	Between Rapid7 InsightIDR and Crowdstrike, we liked Rapid7 InsightIDR due to the functionality of the system and the features Rapid7 InsightIDR has. Rapid7 InsightIDR was very easy to deploy in our environment to our endpoint devices. We like the scanning capabilities and the console we felt was very easy to use and can be easily caught up to our IT staff. Also during vulnerability scans, we felt that Rapid7 InsightIDR was able to detect more and any competitor out there. Incentivized Verified User Anonymous Read full review	The compare well against the others - the pricing models for all but Splunk (free version) are based on EPS/TB consumed... the problem they pose is guesstimating the price tag per month. SolarWinds Security Event Manager gets around that. Incentivized Verified User Anonymous Read full review
Return on Investment	Rapid7 InsightIDR has allowed us to be proactive in securing our systems as the vulnerability scans give us a lens at what we need to fortify when it comes to security. In recent incidents its allowed us to save time and money as it mostly detects issues accurately and we are able to bring systems back quickly without too much downtime for the business. With recent updates, we are confident that Rapid7 InsightIDR is a good solution for the long run as they are always making adjustments to their platform and improving it with every release. Incentivized Verified User Anonymous Read full review	It saves a lot of time when we had issues trying to figure out where the user account lockout was coming from. With it being an affordable SIEM, we are able to have the ability to do the actions associated with a SIEM and the advantages of not “breaking the bank account”. Incentivized Verified User Anonymous Read full review
ScreenShots		SolarWinds Security Event Manager (SEM) Screenshots